Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/F929F33ADA1C11EDA557032AC4F9AE02.roa
File: F929F33ADA1C11EDA557032AC4F9AE02.roa (raw, json)
Hash identifier: PEGhx2StWhhGI7yIK+vtHsCpvug7epU+ndKRnli0hyc=
Subject key identifier: 2B:92:8F:A0:90:11:33:58:FF:3D:3D:17:D3:EB:71:C2:85:8E:F0:96
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 052E
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/F929F33ADA1C11EDA557032AC4F9AE02.roa
Signing time: Fri 13 Oct 2023 00:53:00 +0000
ROA not before: Fri 13 Oct 2023 00:53:00 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 141376
IP address blocks: 103.234.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 09:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1326 (0x52e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Oct 13 00:53:00 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=652894ec-7879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:e0:13:ef:59:e2:d4:1c:54:0d:b8:5f:9a:
fd:d1:40:6c:bd:8e:4b:76:db:db:bb:d4:43:3e:69:
8a:c9:78:db:6f:99:ed:e7:09:82:fe:52:7d:0b:04:
67:94:9b:dd:59:38:49:b1:a0:48:57:53:94:3d:ab:
1f:f3:73:b2:60:5f:d2:08:66:33:12:ab:6a:77:79:
36:15:df:73:89:65:d4:01:79:76:3b:eb:17:37:1b:
6f:c3:60:a3:bc:bd:88:37:f2:38:07:14:bb:a9:92:
2c:ca:fb:17:96:4c:d2:c3:c9:ec:e7:6f:e6:44:4a:
43:73:10:b8:cf:4f:d2:62:2e:44:7e:55:87:46:35:
56:e5:fd:f0:29:90:54:6e:cc:6c:41:df:0d:2f:6b:
3a:2d:57:15:e2:06:45:07:46:bd:e5:60:f3:e3:e6:
f3:23:b5:5e:d4:51:46:48:09:03:3f:12:f5:5f:4e:
49:43:ea:bf:8d:ef:8c:19:c7:20:58:09:b1:42:c5:
59:48:b5:3b:08:7f:03:7f:1f:95:32:1c:79:c3:98:
fe:e8:b4:94:19:d6:5d:5d:4b:b3:6b:a3:32:1d:6a:
10:be:88:e5:03:a1:36:e9:bb:73:5e:ce:a8:bd:87:
f7:88:b1:b6:4c:b7:41:d3:7b:96:c0:a4:88:e4:7c:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:92:8F:A0:90:11:33:58:FF:3D:3D:17:D3:EB:71:C2:85:8E:F0:96
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/F929F33ADA1C11EDA557032AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.55.0/24
Signature Algorithm: sha256WithRSAEncryption
15:88:ab:ee:07:df:fa:3b:d5:91:d0:a4:24:f6:8c:49:ba:1c:
28:85:54:b8:b3:db:87:cb:69:76:dd:24:77:1f:16:94:d6:ac:
1a:5f:fb:b8:b9:de:8c:64:ff:30:20:1a:d7:28:8c:5c:3b:5d:
86:72:b6:09:ad:a5:f0:59:9c:0d:f0:c2:c3:8e:80:7e:e9:10:
56:8b:f3:36:37:f1:32:49:cb:1d:33:92:95:96:85:78:fc:6e:
64:9e:f4:1e:e2:88:38:43:41:e2:51:e1:58:c8:3d:a1:39:e8:
c9:64:6e:fe:b8:95:7b:1d:d6:9f:dc:5e:92:d4:d4:0c:33:14:
3d:80:ec:cf:ac:eb:77:4c:b3:88:ba:fb:29:44:3c:5c:37:e8:
75:1e:85:e7:e6:23:17:7f:51:06:ff:02:26:da:59:ba:5d:05:
2d:0b:fb:26:0c:0c:fc:da:57:9c:de:9e:4c:52:25:45:38:13:
b7:76:9a:53:84:f5:66:16:fb:fe:4e:a6:5b:95:99:f5:6b:0a:
74:4d:d2:16:5f:2b:52:16:f8:75:91:3c:e8:81:f6:a5:e7:0f:
4a:8e:06:1c:ff:28:5e:57:c6:16:59:46:f4:9d:67:2b:53:2c:
d5:6c:9f:15:dc:00:83:f8:8d:49:1d:00:9d:44:48:42:44:0a:
79:c1:98:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 13:00:55 2024 by rpki-client on console-ams.rpki-client.org